Hands-on security for DIY projects
Key | Action |
---|---|
K or space | Play / Pause |
M | Mute / Unmute |
C | Select next subtitles |
A | Select next audio track |
V | Show slide in full page or toggle automatic source change |
left arrow | Seek 5s backward |
right arrow | Seek 5s forward |
shift + left arrow or J | Seek 10s backward |
shift + right arrow or L | Seek 10s forward |
control + left arrow | Seek 60s backward |
control + right arrow | Seek 60s forward |
shift + down arrow | Decrease volume |
shift + up arrow | Increase volume |
shift + comma | Decrease playback rate |
shift + dot or shift + semicolon | Increase playback rate |
end | Seek to end |
beginning | Seek to beginning |
Share this media
Download links
HLS video stream
You can use an external player to play this stream (like VLC).
HLS video streamInformation on this media
Links:
Number of views:
16Creation date:
July 6, 2016Speakers:
Antoine CervoiseCompany:
RMLLLicense:
CC BY SA v4Description
Internet of Things (IoT) is the new trend in IT talks, meetings and magazines. Security communities follow the hype: most of the infosec conferences have already discussed how to break into a doorbell, a car, a toilet… As IoT diffused in the last years, so do DIY projects thanks to Arduino project, Raspberry Pi project and low cost 3D printers. You can easily find books about DIY in a bookstore, magazines are dedicated to this subject, and the web is full of blog about it. We know we must be careful of IoT and all its vulnerabilities… But we should also consider security while making a DIY project.
From the Raspberry Pi used as a Media Center in the living room to the DIY Arduino Meteo Station in the garden, all these projects may come with their vulnerabilities. This talk will deal with bad and good examples from magazines and blogs showing how it can be easy (sometimes easier than with an IoT device) to introduce yourself into someone else network.
The aim of this presentation is not to find vulnerabilites in Raspian Packages and deduct that DIY is a major source of threats, but to share some thoughts on building safer DIY projects.
Antoine Cervoise
Antoine is an IT security engineer, skilled in infosec incident handling, pentest and audit. He enjoys I.T., electronics and D.I.Y. beers by night… and he’s fond of cigars!
Other media in the channel "Sécurité"
86 viewsMOWR, A virustotal-like service for web malwaresAugust 7th, 2016
273 views, 1 this monthMIG: Investigate 1,000 endpoints in 10sAugust 8th, 2016
59 viewsComplex malware & forensics investigationAugust 7th, 2016
129 views, 1 this monthUsing and abusing MISP to track campaignsAugust 7th, 2016
18 viewsBuilding A Poor man’s Fir3Ey3 Mail ScannerAugust 8th, 2016
17 viewsLightning talk about Server Side TLSAugust 7th, 2016